Commit graph

155 commits

Author SHA1 Message Date
Paul Whalen
781895866f F42: Update for final
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-04-10 15:43:52 -04:00
Paul Whalen
1ef441bdb3 Default root config to mount sysroot as read only
See: https://github.com/fedora-iot/iot-distro/issues/81
     https://fedoraproject.org/wiki/Changes/Silverblue_Kinoite_readonly_sysroot

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-03-24 10:53:27 -04:00
74ff4a4e6c drop policycoreutils-python-utils in base
The policycoreutils-python-utils pulls in a bunch of extra
SELinux utils which aren't used in day to day, it pulls in
a bunch of python packages, it can easily be layered and
isn't generally needed.

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2025-03-13 15:46:08 +00:00
Paul Whalen
a395381b71 Remove grub2-workaround
Remove grub2-workaround.yaml, bug has been fixed.

See: https://bugzilla.redhat.com/show_bug.cgi?id=2305291

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-03-06 14:15:03 -05:00
612ca8c340 iot: drop kernel-tools
It too should be layered, not included in the base image.

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2025-02-28 17:12:10 +00:00
Paul Whalen
fa72929f39 Enable composefs by default
See: https://pagure.io/workstation-ostree-config/pull-request/591
     https://fedoraproject.org/wiki/Changes/ComposefsAtomicCoreOSIoT
     https://fedoraproject.org/wiki/Changes/ComposefsAtomicDesktops

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-27 15:33:53 -05:00
Paul Whalen
fdf36adb8b Migrate systems to a static GRUB config
See: https://pagure.io/workstation-ostree-config/pull-request/591
     https://fedoraproject.org/wiki/Changes/ComposefsAtomicCoreOSIoT
     https://fedoraproject.org/wiki/Changes/ComposefsAtomicDesktops

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-27 15:28:38 -05:00
Paul Whalen
a743314472 Disable ima in ostree due to ongoing compose issues
See: https://bugzilla.redhat.com/show_bug.cgi?id=2346265

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-24 10:45:37 -05:00
Paul Whalen
8e0acef7aa Drop parsec no longer supported upstream
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-18 16:38:44 -05:00
Paul Whalen
87303d3fc4 Remove Zezere and enable systemd-firstboot
Remove Zezere and enable systemd-firstboot for local configuration.

See: https://fedoraproject.org/wiki/Changes/Retire_Zezere

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-18 16:36:16 -05:00
Paul Whalen
f465587ca5 Setup for F-42 branched
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-02-04 15:33:06 -05:00
djach7
c611d4da96 Adds bootupd update to boot process
Updates bootupd.yaml to enable bootupctl-update upon system boot. This allows bootupd to work as expected on Fedora IoT raw image systems, with all expected components installed.

Signed-off-by: djach7 <djachimo@redhat.com>
2024-12-16 16:42:00 -05:00
David Jachimowicz
91539fbf82
Update fedora-iot-base.yaml to sync with osbuild iot-commit
Adds ssh-key-dir and ignition-edge packages to base yaml. ssh-key-dir is needed to transfer ssh keys to the iot system during boot
and ignition-edge is needed to allow ssh-key-dir to work properly.

Explicitly adds fedora-iot-config package. Was previously pulled in as a requirement, added for clarity.

Adds fdo-owner-cli package to increase FDO functionality.

These changes should help bring the package list more in line with the osbuild iot-commit, as well as rectifying issue 70 and issue 49 (relating to ssh key login and home directory creation on iot systems).

Issue 70: https://github.com/fedora-iot/iot-distro/issues/70
Issue 49: https://github.com/fedora-iot/iot-distro/issues/49

Signed-off-by: djach7 <djachimo@redhat.com>
2024-11-19 12:09:25 -05:00
Paul Whalen
597796c53f Add iot base bootc image
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-09-25 08:57:05 -04:00
176b0add79 drop dnsmasq
Not sure why it was included, I suspect it was once used
for container networking.

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2024-09-20 15:28:56 +01:00
Paul Whalen
36ab3daaf0 fedora-iot-base: Add workaround for issue with newer GRUB2
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-09-03 09:38:53 -04:00
1a898a7337 bootupd: add some contextual comments
Signed-off-by: Micah Abbott <miabbott@redhat.com>
2024-08-28 13:54:39 -04:00
Paul Whalen
023d15b50f IoT: Update rawhide for F-42
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-08-12 15:26:49 -04:00
Paul Whalen
985a450f7c F41: Add dnf5 to packages
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-07-15 13:39:36 -04:00
Paul Whalen
c1ecf382b8 F41: add bootc to packages
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-05-03 10:49:13 -04:00
Paul Whalen
1314f2a3f2 F41: Adjust repo to use mirrors
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-16 13:43:24 -04:00
Paul Whalen
8329945ded F41: Add base bootc container
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-15 11:47:11 -04:00
Paul Whalen
187a596a33 F41: enable fdo-client-linuxapp.service
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-12 08:48:50 -04:00
b908de5dc7 add passt userspace network for podmn5 requirements
It seems podman5 has changed the rootless container network
stack to passt so add this into our compose alongside the
exisitng slirp4netns while we find out how the migration
works so we can document it.

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2024-03-19 14:13:26 +00:00
Paul Whalen
4ef41ffa05 f41: enable bootupd
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-21 15:46:40 -05:00
Paul Whalen
ede36f3a2c Drop podman-plugins package
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-14 16:53:30 -05:00
Paul Whalen
efa4770938 IoT: Update rawhide for F-41
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-13 13:06:27 -05:00
Paul Whalen
20661a3bb1 Add fedora-iot-config service to presets
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-12 10:31:25 -05:00
Paul Whalen
ff8dab07b1 Drop passwd, now provided by shadow-utils
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-08 09:56:34 -05:00
Paul Whalen
0fdf7b3424 Revert adding bootupd for now.
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-02-01 10:06:05 -05:00
Paul Whalen
6cb006c96f Add bootupd, minor clean up
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-01-30 15:19:39 -05:00
Paul Whalen
eef364fa51 Convert json to yaml
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-01-26 20:16:47 -05:00
Paul Whalen
6b0bb8dcf6 Add min-free-space-percent to fix compose failure
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-12-05 16:25:59 -05:00
Paul Whalen
d085d6d819 Undo rpm scripts enabling units, use only systemd presets
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-11-27 15:30:29 -05:00
efc8d5c336 Enable IMA signatures
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-11-08 13:13:27 +00:00
f1fdb7a4d9 Add criu-libs as criu doesn't pull it in
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-10-25 16:38:48 +01:00
Paul Whalen
d6a3afca84 IoT: Update rawhide for F-40
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-08-14 13:50:42 -04:00
1349eef26a Add a missing dep from copy/paste
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-07-26 20:27:35 +01:00
1d9600d8e3 Add kernel back, remove trailing space
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-07-26 17:28:10 +01:00
Paul Whalen
b994f0b5a4 Remove trailing comma in fedora-iot-base.json
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-07-26 11:29:44 -04:00
d9d9360619 IoT: Update the package set and sort alphanetically
Some minor updates to the package set, we add the FDO client
and drop bluez/libgpiod, if they're needed it's easy to layer
them, and then we sort it all alphabetically.

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-07-26 14:55:54 +01:00
Paul Whalen
513aced27d Move boot-location to modules
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-07-10 20:26:26 -04:00
2af239a979 aarch64: add optee_client package
The optee_client TEE supplicant client and library enable interaction
with the OP-TEE trusted execution environment which runs in the Arm
TrustZone. The client is useful for certain devices.

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-07-08 13:37:54 +01:00
2c3ce94904 firmware: Updates for changes in iwlwifi packaging
The Intel WiFi firmware was consolidated/adjusted to better
align with the kernel drivers.

Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-07-06 11:11:56 +01:00
Paul Whalen
7fb6ff3c32 Fix json formatting
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-04-21 14:05:50 -04:00
a3b9689aea Add split out wifi firmwares explicitly
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2023-04-20 14:51:16 +01:00
Paul Whalen
f0727787bc Add workaround for anaconda unified-core issue.
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-03-24 13:47:40 -04:00
Paul Whalen
91e80aecf0 IoT: Update rawhide for F-39
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2023-02-10 10:52:28 -05:00
91c9bdb99f Set tmp-is-dir = True
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2022-08-27 09:32:57 +01:00
f22dd5b085 IoT: Update rawhide for F-38
Signed-off-by: Peter Robinson <pbrobinson@gmail.com>
2022-08-13 15:02:37 +01:00